
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json)
Hash identifier: BKC33zY68G9GmTxaNiULMfVFLG0iXHF1v3RCNcP0ZxU=
Subject key identifier: 24:46:F0:B3:4B:02:DD:4B:9F:B3:2A:0B:F4:5A:AE:28:4C:3E:51:8B
Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Certificate serial: 0D5D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
Manifest number: 0D52
Signing time: Wed 14 Oct 2026 18:15:39 +0000
Manifest this update: Wed 14 Oct 2026 18:15:39 +0000
Manifest next update: Wed 21 Oct 2026 18:15:39 +0000
Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: EL+gAVBF34WEAuublZddDwePTO9+0TpYQPRNu2cIrKI=)
2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: h96ygBqP1HseQXwwUH62n5eNi2bKC3tu8QpUrxfOlvo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 18:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3421 (0xd5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4
Validity
Not Before: Oct 14 18:15:39 2026 GMT
Not After : Oct 21 18:15:39 2026 GMT
Subject: CN=6acfc6cb-0ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:fd:55:33:69:0a:d8:22:07:90:8d:60:4e:
87:a0:81:5c:db:d7:01:57:f7:38:94:59:df:f2:70:
9b:17:64:6e:0c:f9:5a:2d:8d:ee:04:8f:72:93:c3:
26:46:af:7a:7b:c4:95:a7:e8:d3:f8:bc:12:06:3c:
b8:02:9a:ee:d9:5c:6b:7a:ef:5e:4d:63:38:34:cb:
e4:d3:28:c5:46:6d:7e:0d:74:41:c3:20:a5:18:5a:
90:b9:12:36:88:10:a4:8e:22:60:44:0f:20:c8:0a:
f8:23:6b:d2:37:06:ad:f3:0a:66:84:b2:ca:81:ed:
e4:76:f4:81:35:dc:e5:1c:98:b0:9e:d7:42:45:a5:
cc:f9:c2:a0:fc:b7:eb:41:e1:ab:73:ec:a7:50:f8:
c8:b9:e4:11:01:10:17:18:90:19:23:12:d9:1c:84:
88:a9:5d:df:7a:86:9f:03:fb:d6:21:67:4b:b0:8b:
c6:43:df:db:4f:46:12:4e:73:f9:42:21:2b:84:02:
d5:1a:36:11:79:e2:41:0b:83:97:c1:0e:cf:c3:48:
8b:f5:85:81:71:e9:c9:df:b9:c2:ea:9a:da:57:dc:
59:29:0c:00:f2:a2:66:e1:3c:75:37:df:3d:8f:dc:
b8:7e:3c:f8:21:91:10:2a:9b:df:1b:42:62:b2:7b:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:F0:B3:4B:02:DD:4B:9F:B3:2A:0B:F4:5A:AE:28:4C:3E:51:8B
X509v3 Authority Key Identifier:
keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ac:1f:1a:08:d2:bd:56:08:61:5d:5d:7b:52:77:f5:c2:c6:0a:
a6:d2:d5:c3:7b:27:5b:51:18:b9:82:5a:b6:85:49:5a:38:be:
01:0a:52:4a:a2:aa:8b:50:9f:f0:05:70:f9:f7:04:4e:cc:d5:
b3:9c:09:68:06:e5:5c:49:65:bb:66:a2:50:22:67:6e:20:7f:
91:7d:aa:70:ce:4e:85:87:bf:fc:1d:4e:06:5b:ba:f1:01:42:
a3:6f:6d:84:e8:da:f8:46:5a:93:f5:e2:c6:b2:ae:27:67:8d:
53:eb:cd:d4:ae:c5:75:cd:73:02:36:16:7c:6c:8f:59:f6:e1:
c3:99:a7:4c:4f:a4:ab:66:3e:35:0f:68:94:15:58:1d:01:e5:
87:60:a9:85:9e:cb:e0:96:90:4b:2a:7d:b9:aa:c7:57:c2:d3:
e5:a9:28:b2:6b:27:7f:4d:09:c8:0e:e6:45:87:91:5a:24:bb:
32:93:ba:ab:0e:c1:fd:51:1e:a2:e8:68:72:84:15:55:55:23:
32:4a:94:15:71:8f:b9:f7:54:76:ba:3f:15:be:48:87:81:4d:
e9:16:41:91:01:93:a4:15:7d:e4:99:10:74:76:c7:e0:ad:c1:
f2:79:e0:bd:02:84:01:df:9e:07:f3:d8:3b:f2:00:ce:a2:a6:
7b:45:f1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:29 2026 by rpki-client